EP2962195A1 - Third party application scriptablity - Google Patents

Third party application scriptablity

Info

Publication number
EP2962195A1
EP2962195A1 EP14710466.5A EP14710466A EP2962195A1 EP 2962195 A1 EP2962195 A1 EP 2962195A1 EP 14710466 A EP14710466 A EP 14710466A EP 2962195 A1 EP2962195 A1 EP 2962195A1
Authority
EP
European Patent Office
Prior art keywords
application
party
scripts
script
party script
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP14710466.5A
Other languages
German (de)
French (fr)
Other versions
EP2962195B1 (en
Inventor
Corey Goldfeder
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Google LLC
Original Assignee
Google LLC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Google LLC filed Critical Google LLC
Priority to PL14710466T priority Critical patent/PL2962195T3/en
Publication of EP2962195A1 publication Critical patent/EP2962195A1/en
Application granted granted Critical
Publication of EP2962195B1 publication Critical patent/EP2962195B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45504—Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators
    • G06F9/45529—Embedded in an application, e.g. JavaScript in a Web browser

Definitions

  • Software applications are often developed following specific requirements to provide certain capabilities. Although a software application developer may provide end users with valuable functionality, third party script developers may enhance this basic functionality by providing extensions, automations, plugins, or similar code which change or extend software application functionality, making the application more user-friendly.
  • web application developers may create a software application for sending and receiving email.
  • the web application may include functionality for finding and labeling email.
  • the application may also have a limit on the size capacity of any one end user's email account.
  • the web application may not provide end users with the ability to find email messages over a certain size so that they can delete large email messages to free up space in their email account.
  • a third party script developer may write a plugin that, when added to the email application, can find and label all email messages over a certain size.
  • An end user can add the third party developer's plugin to his or her browser and run the plugin to easily find large email messages so that these messages can be deleted when the end user's email account reaches size capacity.
  • customary third party scripts (105) most often work at the web browser-level (101a, 101b) and are not an integral part of software applications.
  • a notable example of browser- level third party scripts is a plugin, which is a software component that can customize functionality of a web application.
  • Browser-level scripts are problematic because they are browser-dependent. If an end user installs a script such as the one shown in FIG. 1 (105) for an application (103a) in one browser (101a), but then changes the browser (101b) that he or she is using to access a different instance of the same application (103b), the end user must install the script in the new browser in order to obtain the script's functionality for the application.
  • script 105's functionality extension of the application is available in browser 1 (101a), but not in browser 2 (101b) since the script is not installed in browser 2 (101b).
  • This specification describes technologies relating to third party application scriptability in general, and specifically to methods and systems for allowing third-party script developers to securely add functionality to software applications.
  • An exemplary system includes a scripting environment providing at least one of: authentication on a server, access control, limits on client-side scripting, and management of scripts.
  • the system may additionally include one or more processing devices and one or more storage devices that store instructions to create a server-side web service that allows communication between a third-party script client and the application server; create a client-side application programming interface that exposes a subset of the application's functionality and resources; allow the third-party script access to the application's server via the web service; allow the third-party script to access the application's functionality and resources using the client-side application programming interface; and provide an end user with access to the third-party script.
  • a second exemplary system may include a scripting environment as described above, one or more processing devices, and one or more storage devices storing instructions that allow a third-party script developer to: receive an application programming interface from a software application; receive a web service from the software application; create a script that changes the functionality of the software application using the application programming interface and the web service; and allows end users to access the script.
  • a third-party script may define and register a trigger that initiates an action in the third-party script when an event occurs in the application;
  • a software application developer may have the ability to wrap a web service into a scripting library that can be included in a third-party script;
  • a software application developer may be able to load a third party script into the application through an integrated development environment;
  • the integrated development environment may create branding associated with a software application;
  • an end user may be provided with a gallery of application-specific scripts that are available for installation; and an end user may be provided with a dashboard of currently installed scripts where the user can manage installed scripts.
  • FIG. 1 is a block diagram illustrating a customary embodiment for adding third-party scripts to a web application.
  • FIG. 2 is a block diagram illustrating an exemplary embodiment for adding third-party scripts to a web application.
  • FIG. 3 is a flow diagram of an exemplary method for adding third-party scripts to a web application.
  • FIG. 4 is a block diagram illustrating an exemplary computing device.
  • a comprehensive plugin-like system can exist that allows software application developers to incorporate third-party scripts into their applications as illustrated in FIG. 2.
  • the system may provide the flow and mechanisms for enabling a secure scripting environment to be added to a hosted software application development environment so that third-party scripts can be incorporated into software applications without application developers having to be concerned about protecting their applications from malicious scripts.
  • This scripting environment may allow an application to be securely scriptable by untrusted third-party script developers.
  • An exemplary scripting environment may use Caja for secure scripting. Caja is a subset of javascript that provides object-capability security. This technology provides a JavaScript sandbox which can alter user scripts and sanitize them by removing precarious method calls.
  • the application server (109) incorporates the third-party scripts (105) at the application level so the script plugins are independent from the browser (101a, 101b) used to access instances of the application (103a, 103b).
  • a user logged into an application will therefore have the same user experience with the application regardless of the browser with which the user is accessing the application.
  • An exemplary system may include both client and server scripting components, script hosting, a web integrated development environment (IDE), and a way to view all scripts for a given application.
  • IDE web integrated development environment
  • an exemplary system includes a client/server secure scripting environment.
  • This scripting environment may provide some or all of the following features: (1) a cloud integrated development environment, (2) server-side scripting runtime, (3) script hosting and libraries, (3) event triggers, (4) account management, (5) built-in application programming interfaces (APIs), (6) oAuth integration, (7) a securable client, (8) scripts that can be granted limited in-browser authority which cannot produce malicious attacks on software application end users, and (9) a per-application gallery to view all scripts that were developed for a specific application.
  • a scripting environment may also provide authentication on a server, access controls, and limits on client-side extensions.
  • scripting environment may manage other details including hosting, server APIs, and account management.
  • an exemplary system should understand the needs of a web application and define methods for a web application to interact with a scripting environment in order for the scripting environment and the web application to interact.
  • An exemplary embodiment may provide different views and functionalities for different groups of intended users. There may be a view for software application developers, one for third-party script developers, and one for end users.
  • a software application developer may query the scripting environment for an end user's installed scripts, load the installed scripts on the application's client via a sandboxing technology, sandbox the loaded scripts, and allow the loaded scripts to interact with the application' s server using a web service created to interact with third-party scripts.
  • An exemplary embodiment may provide a software application developer with a way to load a script through an integrated development environment (IDE).
  • This development environment may be preloaded with a web service for the software application.
  • An IDE may be able to understand which application opened the IDE.
  • the application can pass along information regarding special features the application may need when it opens the IDE. For example, the application may send a list of application-specific APIs that should autocomplete in the IDE's code editor.
  • IDE can be generic and not know about any particular application while still allowing any application to customize the IDE as needed.
  • the IDE may also have a way to create branding associated with a software application. For example, an application' s logo and color scheme may be carried over to the IDE.
  • an exemplary system may provide software application developers with the ability to write client- side APIs for their applications.
  • a client- side API may include client-side code and DOM of a particular software application that is accessible to third-party script developers. There may be both standard methods and a template/style guide for adding other methods.
  • Application functionality and resources may be accessed through an application's client-side API.
  • the API defines what application functionality and resources are available to third-party developers. For example, in a spreadsheet application, a script may be written to show a sidebar every time a user selects a cell that contains a formula. In order for the script to be written, the spreadsheet application may provide an API that contains a method for returning the currently selected cell.
  • the returned cell may have properties to determine whether the cell is a formula and provide the cell's value.
  • the spreadsheet API may also contain a method for showing the sidebar. Methods and properties that an application would like to expose to third-party scripts should be defined within the application' s API.
  • An exemplary system may also provide software application developers with tools for writing a server-side web service that may be accessed by third-party scripts in order to communicate with applications' servers.
  • These web services may be written using preexisting APIs that are provided to software application developers through the scripting environment. These APIs may include REST and SOAP APIs.
  • a software application developer may build a library that can be included in scripts developed by third- party script developers.
  • Software application developers may create RESTful services which support oAuth authentication and can be wrapped into a scripting library.
  • An exemplary embodiment may additionally provide software application developers with a way to define and register triggers for their applications.
  • a trigger is a mechanism that initiates an action when an event occurs.
  • Triggers may be application specific and chosen by an application developer.
  • Example triggers include: onEdit, onOpen, and onSave.
  • An "onEdit” trigger will fire when an edit occurs in an application.
  • An "onOpen” trigger will initiate an action when something is opened in an application.
  • An “onSave” trigger will fire when something is saved within an application.
  • An application developer may specify a list of event names that may be used as triggering events for which scripts can be written can be written. Scripts can then register a trigger for a specific event with a broker service so that the script is notified when the particular event occurs.
  • the event may be recorded and the event, as well as an optional payload which may be associated with the event, may be provided to the broker service.
  • the broker service may relay news about the triggering event to scripts that are listening for particular event trigger to fire.
  • the broker service may be a REST service and the payload may be written in JSON.
  • front-end scripting language code may be provided to load installed scripts into an application on a per end user basis.
  • a front-end scripting language may be JavaScript for example.
  • Each end user may want to include a different subset of scripts written for a specific application.
  • Provided code may find all scripts associated with the application and load the scripts which the end user currently accessing the application has installed.
  • an exemplary system may provide a software application developer with a URL that links to a frameable web store view so that the software developer can view his or her application as it appears in a web store.
  • An application may be accessible in a web store so that end users can download and use the application.
  • the software application developer's web store view may include a tab for displaying currently installed scripts for the specific user as well as showing scripts that can be installed.
  • An exemplary system may provide third-party script developers with a server- side web service per application that is aware of the application's context.
  • the scripts when scripts run on the exemplary server, the scripts have access to the APIs that the server-side scripting environment provides.
  • the application's context includes data shared within an instance of the application. This data is available across all requests from different users.
  • an application's web service is written by the application developer and provided to third-party script developers using the scripting environment.
  • a third-party script developer may have access to a client-side API for an application which the script developer can use to access functionality and resources from the application in order to write a script for the application.
  • the client-side API provides a third-party script developer with as much access to the software application as the application developer chooses to grant.
  • the third-party script developer may also have access to the application event triggers that fire when certain events occur in the application.
  • An exemplary embodiment may provide synchronous client APIs, the ability for a script to manipulate or control non-contiguous regions of an application's user interface, and scripting ability to respond to a user event such as a button click in a way that a browser may recognize the user event as a direct response to a user action.
  • An exemplary system may also provide a script developer with an integrated development environment that may have a specified application web service pre-loaded. This scripting development environment may be accessible via the application for which the script developer is writing the script. Additionally, an exemplary system may provide web store integration that allows a script developer to specify the application for which the script developer's script has been written.
  • End users of software applications that have enabled third-party scripting may see a gallery of application-specific scripts that are available for installation. End users may also have a dashboard of currently installed scripts where users can manage their installed scripts on a per-application basis.
  • an exemplary method begins with running a software application for which third-party scripts have been developed.
  • the software application may be run using an end user's authentication credentials and may run code to obtain third-party scripts for the application that the authenticated end user has installed. URLs may be returned for each script.
  • the scripts may then be loaded and run with the associated web application. Some scripts may rely on triggers in order to execute, but will listen for triggers associated with the web application.
  • an exemplary system may enable a web application developer to create a server-side web service that exposes a hosted web application's functionality and resources (301).
  • the system may also allow the web application developer to create a client-side application programming interface (API) that exposes some of the web application's functionality and resources (303).
  • API application programming interface
  • the web application developer may then grant configurable access to a third-party script via the application programming interface so that the script may interact with the web application (305).
  • the third-party script may then be allowed to access the web application's server via the web service provided by the web application developer (307).
  • a third-party script developer may develop a script that uses the client-side API and the web service to interact with the web application. An end user may then be provided with access to the third-party script and may choose to incorporate this script into his or her web application profile (309).
  • FIG. 4 is a high-level block diagram of an exemplary computer (400) that is arranged for allowing third-party script developers to securely add functionality to software applications using a browser-based script editor in a hosted web application execution environment and may be used to implement systems, apparatus, and methods described within this document.
  • the computing device (400) typically includes one or more processors (410) and system memory (420).
  • a memory bus (430) can be used for communicating between the processor (410) and the system memory (420).
  • the processor (410) can be of any type including but not limited to a microprocessor ( ⁇ ), a microcontroller ( ⁇ ), a digital signal processor (DSP), or any combination thereof.
  • the processor (410) can include one more levels of caching, such as a level one cache (411) and a level two cache (412), a processor core (413), and registers (414).
  • the processor core (413) can include an arithmetic logic unit (ALU), a floating point unit (FPU), a digital signal processing core (DSP Core), or any combination thereof.
  • a memory controller (416) can also be used with the processor (410), or in some implementations the memory controller (415) can be an internal part of the processor (410).
  • system memory (420) can be of any type including but not limited to volatile memory (such as RAM), non- volatile memory (such as ROM, flash memory, etc.) or any combination thereof.
  • System memory (420) typically includes an operating system (421), one or more applications (422), and program data (424).
  • the application (422) may include a method for secure interaction between a web application and a third-party script in a hosted web application execution environment.
  • Program Data (424) includes storing instructions that, when executed by the one or more processing devices, implement a system and method for allowing third-party script developers to securely add functionality to software applications. (423).
  • the application (422) can be arranged to operate with program data (424) on an operating system (421).
  • the computing device (400) can have additional features or functionality, and additional interfaces to facilitate communications between the basic configuration (401) and any required devices and interfaces.
  • System memory (420) is an example of computer storage media.
  • Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by computing device 400. Any such computer storage media can be part of the device (400).
  • the computing device (400) can be implemented as a portion of a small-form factor portable (or mobile) electronic device such as a cell phone, a personal data assistant (PDA), a personal media player device, a wireless web-watch device, a personal headset device, an application-specific device, or a hybrid device that include any of the above functions.
  • a small-form factor portable (or mobile) electronic device such as a cell phone, a personal data assistant (PDA), a personal media player device, a wireless web-watch device, a personal headset device, an application-specific device, or a hybrid device that include any of the above functions.
  • PDA personal data assistant
  • the computing device (400) can also be implemented as a personal computer including both laptop computer and non-laptop computer configurations.
  • non-transitory signal bearing medium examples include, but are not limited to, the following: a recordable type medium such as a floppy disk, a hard disk drive, a Compact Disc (CD), a Digital Video Disk (DVD), a digital tape, a computer memory, etc.; and a transmission type medium such as a digital and/or an analog communication medium, (e.g., a fiber optic cable, a waveguide, a wired communications link, a wireless

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)
  • Storage Device Security (AREA)

Abstract

A system and method for allowing third-party script developers to create secure scripts that can safely be incorporated into software applications is disclosed. The system may provide the flow and mechanisms for enabling a client/server secure scripting environment to be added to a hosted software application development environment so that third-party scripts can be added to software applications without application developers having to be concerned about protecting their applications from malicious scripts. This scripting environment may allow an application to be securely scriptable by untrusted third-party script developers.

Description

THIRD PARTY APPLICATION SCRIPT ABILITY
BACKGROUND
[0001] Software applications are often developed following specific requirements to provide certain capabilities. Although a software application developer may provide end users with valuable functionality, third party script developers may enhance this basic functionality by providing extensions, automations, plugins, or similar code which change or extend software application functionality, making the application more user-friendly. For example, web application developers may create a software application for sending and receiving email. The web application may include functionality for finding and labeling email. The application may also have a limit on the size capacity of any one end user's email account. However, the web application may not provide end users with the ability to find email messages over a certain size so that they can delete large email messages to free up space in their email account. A third party script developer may write a plugin that, when added to the email application, can find and label all email messages over a certain size. An end user can add the third party developer's plugin to his or her browser and run the plugin to easily find large email messages so that these messages can be deleted when the end user's email account reaches size capacity.
[0002] Even though third party scripts can improve end user experiences, very few software application developers allow untrusted third party scripts to be added to their web applications because adding third party functionality makes it difficult for a web application developer to maintain web application security and also makes end users' experiences with the web application inconsistent.
[0003] As illustrated in FIG. 1, customary third party scripts (105) most often work at the web browser-level (101a, 101b) and are not an integral part of software applications. A notable example of browser- level third party scripts is a plugin, which is a software component that can customize functionality of a web application. Browser-level scripts are problematic because they are browser-dependent. If an end user installs a script such as the one shown in FIG. 1 (105) for an application (103a) in one browser (101a), but then changes the browser (101b) that he or she is using to access a different instance of the same application (103b), the end user must install the script in the new browser in order to obtain the script's functionality for the application. As shown in FIG. 1, script 105's functionality extension of the application is available in browser 1 (101a), but not in browser 2 (101b) since the script is not installed in browser 2 (101b).
[0004] There should be a system that allows third-party script to closely interact with a host application while still remaining secure. The system should allow software application developers to securely add third-party scripting functionality to their hosted applications so that the third-party scripts can be associated with an end user regardless of how the end user is accessing the application.
SUMMARY
[0005] This specification describes technologies relating to third party application scriptability in general, and specifically to methods and systems for allowing third-party script developers to securely add functionality to software applications.
[0006] In general, one aspect of the subject matter described in this specification can be embodied in a system and method for allowing software application developers to incorporate third-party scripts into their software applications. An exemplary system includes a scripting environment providing at least one of: authentication on a server, access control, limits on client-side scripting, and management of scripts. The system may additionally include one or more processing devices and one or more storage devices that store instructions to create a server-side web service that allows communication between a third-party script client and the application server; create a client-side application programming interface that exposes a subset of the application's functionality and resources; allow the third-party script access to the application's server via the web service; allow the third-party script to access the application's functionality and resources using the client-side application programming interface; and provide an end user with access to the third-party script. A second exemplary system may include a scripting environment as described above, one or more processing devices, and one or more storage devices storing instructions that allow a third-party script developer to: receive an application programming interface from a software application; receive a web service from the software application; create a script that changes the functionality of the software application using the application programming interface and the web service; and allows end users to access the script. [0007] These and other embodiments can optionally include one or more of the following features: a third-party script may define and register a trigger that initiates an action in the third-party script when an event occurs in the application; a software application developer may have the ability to wrap a web service into a scripting library that can be included in a third-party script; a software application developer may be able to load a third party script into the application through an integrated development environment; the integrated development environment may create branding associated with a software application; an end user may be provided with a gallery of application-specific scripts that are available for installation; and an end user may be provided with a dashboard of currently installed scripts where the user can manage installed scripts.
[0008] The details of one or more embodiments of the invention are set forth in the accompanying drawings which are given by way of illustration only, and the description below. Other features, aspects, and advantages of the invention will become apparent from the description, the drawings, and the claims. Like reference numbers and designations in the various drawings indicate like elements.
BRIEF DESCRIPTION OF THE DRAWINGS
[0009] FIG. 1 is a block diagram illustrating a customary embodiment for adding third-party scripts to a web application.
[0010] FIG. 2 is a block diagram illustrating an exemplary embodiment for adding third-party scripts to a web application.
[0011] FIG. 3 is a flow diagram of an exemplary method for adding third-party scripts to a web application.
[0012] FIG. 4 is a block diagram illustrating an exemplary computing device.
DETAILED DESCRIPTION
[0013] According to an exemplary embodiment, a comprehensive plugin-like system can exist that allows software application developers to incorporate third-party scripts into their applications as illustrated in FIG. 2. The system may provide the flow and mechanisms for enabling a secure scripting environment to be added to a hosted software application development environment so that third-party scripts can be incorporated into software applications without application developers having to be concerned about protecting their applications from malicious scripts. This scripting environment may allow an application to be securely scriptable by untrusted third-party script developers. An exemplary scripting environment may use Caja for secure scripting. Caja is a subset of javascript that provides object-capability security. This technology provides a JavaScript sandbox which can alter user scripts and sanitize them by removing precarious method calls. As illustrated in FIG. 2, the application server (109) incorporates the third-party scripts (105) at the application level so the script plugins are independent from the browser (101a, 101b) used to access instances of the application (103a, 103b). A user logged into an application will therefore have the same user experience with the application regardless of the browser with which the user is accessing the application.
[0014] An exemplary system may include both client and server scripting components, script hosting, a web integrated development environment (IDE), and a way to view all scripts for a given application.
[0015] In some embodiments, an exemplary system includes a client/server secure scripting environment. This scripting environment may provide some or all of the following features: (1) a cloud integrated development environment, (2) server-side scripting runtime, (3) script hosting and libraries, (3) event triggers, (4) account management, (5) built-in application programming interfaces (APIs), (6) oAuth integration, (7) a securable client, (8) scripts that can be granted limited in-browser authority which cannot produce malicious attacks on software application end users, and (9) a per-application gallery to view all scripts that were developed for a specific application. A scripting environment may also provide authentication on a server, access controls, and limits on client-side extensions. Additionally, the scripting environment may manage other details including hosting, server APIs, and account management. In general, an exemplary system should understand the needs of a web application and define methods for a web application to interact with a scripting environment in order for the scripting environment and the web application to interact.
[0016] An exemplary embodiment may provide different views and functionalities for different groups of intended users. There may be a view for software application developers, one for third-party script developers, and one for end users.
Software Application Developers
[0017] Using an exemplary system, a software application developer may query the scripting environment for an end user's installed scripts, load the installed scripts on the application's client via a sandboxing technology, sandbox the loaded scripts, and allow the loaded scripts to interact with the application' s server using a web service created to interact with third-party scripts.
[0016] An exemplary embodiment may provide a software application developer with a way to load a script through an integrated development environment (IDE). This development environment may be preloaded with a web service for the software application. An IDE may be able to understand which application opened the IDE. The application can pass along information regarding special features the application may need when it opens the IDE. For example, the application may send a list of application-specific APIs that should autocomplete in the IDE's code editor. IDE can be generic and not know about any particular application while still allowing any application to customize the IDE as needed. The IDE may also have a way to create branding associated with a software application. For example, an application' s logo and color scheme may be carried over to the IDE.
[0018] In some embodiments, an exemplary system may provide software application developers with the ability to write client- side APIs for their applications. A client- side API may include client-side code and DOM of a particular software application that is accessible to third-party script developers. There may be both standard methods and a template/style guide for adding other methods. Application functionality and resources may be accessed through an application's client-side API. The API defines what application functionality and resources are available to third-party developers. For example, in a spreadsheet application, a script may be written to show a sidebar every time a user selects a cell that contains a formula. In order for the script to be written, the spreadsheet application may provide an API that contains a method for returning the currently selected cell. The returned cell may have properties to determine whether the cell is a formula and provide the cell's value. The spreadsheet API may also contain a method for showing the sidebar. Methods and properties that an application would like to expose to third-party scripts should be defined within the application' s API.
[0019] An exemplary system may also provide software application developers with tools for writing a server-side web service that may be accessed by third-party scripts in order to communicate with applications' servers. These web services may be written using preexisting APIs that are provided to software application developers through the scripting environment. These APIs may include REST and SOAP APIs. Alternatively, a software application developer may build a library that can be included in scripts developed by third- party script developers. Software application developers may create RESTful services which support oAuth authentication and can be wrapped into a scripting library.
[0020] An exemplary embodiment may additionally provide software application developers with a way to define and register triggers for their applications. A trigger is a mechanism that initiates an action when an event occurs. Triggers may be application specific and chosen by an application developer. Example triggers include: onEdit, onOpen, and onSave. An "onEdit" trigger will fire when an edit occurs in an application. An "onOpen" trigger will initiate an action when something is opened in an application. An "onSave" trigger will fire when something is saved within an application. An application developer may specify a list of event names that may be used as triggering events for which scripts can be written can be written. Scripts can then register a trigger for a specific event with a broker service so that the script is notified when the particular event occurs. The event may be recorded and the event, as well as an optional payload which may be associated with the event, may be provided to the broker service. The broker service may relay news about the triggering event to scripts that are listening for particular event trigger to fire. The broker service may be a REST service and the payload may be written in JSON.
[0021] In some embodiments, front-end scripting language code may be provided to load installed scripts into an application on a per end user basis. A front-end scripting language may be JavaScript for example. Each end user may want to include a different subset of scripts written for a specific application. Provided code may find all scripts associated with the application and load the scripts which the end user currently accessing the application has installed.
[0022] In addition to facilitating client/server communications among a software application and third-party scripts, an exemplary system may provide a software application developer with a URL that links to a frameable web store view so that the software developer can view his or her application as it appears in a web store. An application may be accessible in a web store so that end users can download and use the application. The software application developer's web store view may include a tab for displaying currently installed scripts for the specific user as well as showing scripts that can be installed. Third-Party Script Developers
[0023] An exemplary system may provide third-party script developers with a server- side web service per application that is aware of the application's context. As discussed above, when scripts run on the exemplary server, the scripts have access to the APIs that the server-side scripting environment provides. The application's context includes data shared within an instance of the application. This data is available across all requests from different users. As explained above, an application's web service is written by the application developer and provided to third-party script developers using the scripting environment. In some embodiments, a third-party script developer may have access to a client-side API for an application which the script developer can use to access functionality and resources from the application in order to write a script for the application. As discussed above, the client-side API provides a third-party script developer with as much access to the software application as the application developer chooses to grant. The third-party script developer may also have access to the application event triggers that fire when certain events occur in the application. An exemplary embodiment may provide synchronous client APIs, the ability for a script to manipulate or control non-contiguous regions of an application's user interface, and scripting ability to respond to a user event such as a button click in a way that a browser may recognize the user event as a direct response to a user action.
[0024] An exemplary system may also provide a script developer with an integrated development environment that may have a specified application web service pre-loaded. This scripting development environment may be accessible via the application for which the script developer is writing the script. Additionally, an exemplary system may provide web store integration that allows a script developer to specify the application for which the script developer's script has been written.
End Users
[0020] End users of software applications that have enabled third-party scripting may see a gallery of application-specific scripts that are available for installation. End users may also have a dashboard of currently installed scripts where users can manage their installed scripts on a per-application basis.
[0025] According to an exemplary embodiment, an exemplary method begins with running a software application for which third-party scripts have been developed. The software application may be run using an end user's authentication credentials and may run code to obtain third-party scripts for the application that the authenticated end user has installed. URLs may be returned for each script. The scripts may then be loaded and run with the associated web application. Some scripts may rely on triggers in order to execute, but will listen for triggers associated with the web application.
[0026] As discussed above and illustrated in FIG. 3, according to another embodiment, an exemplary system may enable a web application developer to create a server-side web service that exposes a hosted web application's functionality and resources (301). The system may also allow the web application developer to create a client-side application programming interface (API) that exposes some of the web application's functionality and resources (303). The web application developer may then grant configurable access to a third-party script via the application programming interface so that the script may interact with the web application (305). The third-party script may then be allowed to access the web application's server via the web service provided by the web application developer (307). A third-party script developer may develop a script that uses the client-side API and the web service to interact with the web application. An end user may then be provided with access to the third-party script and may choose to incorporate this script into his or her web application profile (309).
[0027] FIG. 4 is a high-level block diagram of an exemplary computer (400) that is arranged for allowing third-party script developers to securely add functionality to software applications using a browser-based script editor in a hosted web application execution environment and may be used to implement systems, apparatus, and methods described within this document. In a very basic configuration (401), the computing device (400) typically includes one or more processors (410) and system memory (420). A memory bus (430) can be used for communicating between the processor (410) and the system memory (420).
[0028] Depending on the desired configuration, the processor (410) can be of any type including but not limited to a microprocessor (μΡ), a microcontroller (μθ), a digital signal processor (DSP), or any combination thereof. The processor (410) can include one more levels of caching, such as a level one cache (411) and a level two cache (412), a processor core (413), and registers (414). The processor core (413) can include an arithmetic logic unit (ALU), a floating point unit (FPU), a digital signal processing core (DSP Core), or any combination thereof. A memory controller (416) can also be used with the processor (410), or in some implementations the memory controller (415) can be an internal part of the processor (410).
[0029] Depending on the desired configuration, the system memory (420) can be of any type including but not limited to volatile memory (such as RAM), non- volatile memory (such as ROM, flash memory, etc.) or any combination thereof. System memory (420) typically includes an operating system (421), one or more applications (422), and program data (424). The application (422) may include a method for secure interaction between a web application and a third-party script in a hosted web application execution environment. Program Data (424) includes storing instructions that, when executed by the one or more processing devices, implement a system and method for allowing third-party script developers to securely add functionality to software applications. (423). In some embodiments, the application (422) can be arranged to operate with program data (424) on an operating system (421).
[0030] The computing device (400) can have additional features or functionality, and additional interfaces to facilitate communications between the basic configuration (401) and any required devices and interfaces.
[0031] System memory (420) is an example of computer storage media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by computing device 400. Any such computer storage media can be part of the device (400).
[0032] The computing device (400) can be implemented as a portion of a small-form factor portable (or mobile) electronic device such as a cell phone, a personal data assistant (PDA), a personal media player device, a wireless web-watch device, a personal headset device, an application-specific device, or a hybrid device that include any of the above functions. The computing device (400) can also be implemented as a personal computer including both laptop computer and non-laptop computer configurations.
[0033] The foregoing detailed description has set forth various embodiments of the devices and/or processes via the use of block diagrams, flowcharts, and/or examples. Insofar as such block diagrams, flowcharts, and/or examples contain one or more functions and/or operations, it will be understood by those within the art that each function and/or operation within such block diagrams, flowcharts, or examples can be implemented, individually and/or collectively, by a wide range of hardware, software, firmware, or virtually any combination thereof. In one embodiment, several portions of the subject matter described herein may be implemented via Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs), digital signal processors (DSPs), or other integrated formats. However, those skilled in the art will recognize that some aspects of the embodiments disclosed herein, in whole or in part, can be equivalently implemented in integrated circuits, as one or more computer programs running on one or more computers, as one or more programs running on one or more processors as firmware, or as virtually any combination thereof, and that designing the circuitry and/or writing the code for the software and or firmware would be well within the skill of one of skill in the art in light of this disclosure. In addition, those skilled in the art will appreciate that the mechanisms of the subject matter described herein are capable of being distributed as a program product in a variety of forms, and that an illustrative embodiment of the subject matter described herein applies regardless of the particular type of non-transitory signal bearing medium used to actually carry out the distribution. Examples of a non-transitory signal bearing medium include, but are not limited to, the following: a recordable type medium such as a floppy disk, a hard disk drive, a Compact Disc (CD), a Digital Video Disk (DVD), a digital tape, a computer memory, etc.; and a transmission type medium such as a digital and/or an analog communication medium, (e.g., a fiber optic cable, a waveguide, a wired communications link, a wireless
communication link, etc.)
[0034] With respect to the use of substantially any plural and/or singular terms herein, those having skill in the art can translate from the plural to the singular and/or from the singular to the plural as is appropriate to the context and/or application. The various singular/plural permutations may be expressly set forth herein for sake of clarity.
[0035] Thus, particular embodiments of the subject matter have been described. Other embodiments are within the scope of the following claims. In some cases, the actions recited in the claims can be performed in a different order and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In certain implementations, multitasking and parallel processing may be advantageous.

Claims

CLAIMS What is claimed is:
1. A system for allowing software application developers to incorporate third-party scripts into their software applications, the system comprising:
a scripting environment providing at least one of: authentication on a server, access control, limits on client-side scripting, and management of scripts;
one or more processing devices; and
one or more storage devices storing instructions that, when executed by the one or more processing devices, cause the one or more processing devices to allow a software application developer to:
create a server-side web service that allows communication between a third- party script client and the application server (301);
create a client-side application programming interface that exposes a subset of the application's functionality and resources (303);
allow the third-party script access to the application's server via the web service (307);
allow the third-party script to access the application's functionality and resources using the client-side application programming interface (305); and
provide an end user with access to the third-party script (309).
2. The system of claim 1 further comprising allowing a third-party script to define and register a trigger that initiates an action in the third-party script when an event occurs in the application.
3. The system of claim 1 further comprising allowing a software application developer the ability to wrap the web service into a scripting library that can be included in a third-party script.
4. The system of claim 1 further comprising allowing a software application developer the ability to load a third party script into the application through an integrated development environment.
5. The system of claim 4 wherein the integrated development environment creates branding associated with a software application.
6. The system of claim 1 further comprising providing an end user with a gallery of application-specific scripts that are available for installation.
7. The system of claim 1 further comprising providing an end user with a dashboard of currently installed scripts where the user can manage installed scripts.
8. A computer-implemented method for allowing software application developers to incorporate third-party scripts into their software applications comprising:
creating a server-side web service that allows communication between a third- party script client and the application server (301);
creating a client-side application programming interface that exposes a subset of the application's functionality and resources (303);
allowing the third-party script access to the application's server via the web service (307);
allowing the third-party script to access the application's functionality and resources using the client-side application programming interface (305); and
providing an end user with access to the third-party script (309).
9. The computer-implemented method of claim 8 further comprising allowing a third- party script to define and register a trigger that initiates an action in the third-party script when an event occurs in the application.
10. The computer-implemented method of claim 8 further comprising allowing a software application developer the ability to wrap the web service into a scripting library that can be included in a third-party script.
11. The computer-implemented method of claim 8 further comprising allowing a software application developer the ability to load a third party script into the application through an integrated development environment.
12. The computer-implemented method of claim 11 wherein the integrated development environment creates branding associated with a software application.
13. The computer- implemented method of claim 8 further comprising providing an end user with a gallery of application-specific scripts that are available for installation.
EP14710466.5A 2013-02-27 2014-02-26 Third party application scriptablity Active EP2962195B1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PL14710466T PL2962195T3 (en) 2013-02-27 2014-02-26 Third party application scriptablity

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US13/779,599 US9465586B2 (en) 2013-02-27 2013-02-27 Third party application scriptability
PCT/US2014/018604 WO2014134133A1 (en) 2013-02-27 2014-02-26 Third party application scriptablity

Publications (2)

Publication Number Publication Date
EP2962195A1 true EP2962195A1 (en) 2016-01-06
EP2962195B1 EP2962195B1 (en) 2019-04-10

Family

ID=50280513

Family Applications (1)

Application Number Title Priority Date Filing Date
EP14710466.5A Active EP2962195B1 (en) 2013-02-27 2014-02-26 Third party application scriptablity

Country Status (11)

Country Link
US (1) US9465586B2 (en)
EP (1) EP2962195B1 (en)
JP (1) JP6162256B2 (en)
KR (1) KR101722108B1 (en)
CN (1) CN104903860B (en)
AU (1) AU2014223569B2 (en)
BR (1) BR112015018082A8 (en)
DE (1) DE202014010923U1 (en)
ES (1) ES2733731T3 (en)
PL (1) PL2962195T3 (en)
WO (1) WO2014134133A1 (en)

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11397520B2 (en) 2013-08-01 2022-07-26 Yogesh Chunilal Rathod Application program interface or page processing method and device
WO2015015251A1 (en) * 2013-08-01 2015-02-05 Yogesh Chunilal Rathod Presenting plurality types of interfaces and functions for conducting various activities
US20150186193A1 (en) * 2013-12-27 2015-07-02 Microsoft Corporation Generation of client-side application programming interfaces
US9851952B2 (en) * 2014-09-25 2017-12-26 Oracle International Corporation Seamless restful API generation and consumption through a single channel
EP3304402A1 (en) * 2015-05-28 2018-04-11 Entit Software LLC Security vulnerability detection
CN105487910A (en) * 2016-01-22 2016-04-13 北京世纪龙脉科技有限公司 Browser plugin implementation method, HTTP application server and browser
US10931679B2 (en) 2016-06-07 2021-02-23 Microsoft Technology Licensing, Llc Service actions for digital assistants
US10521251B2 (en) 2016-09-23 2019-12-31 Microsoft Technology Licensing, Llc Hosting application experiences within storage service viewers
US10063533B2 (en) * 2016-11-28 2018-08-28 International Business Machines Corporation Protecting a web server against an unauthorized client application
US10776081B2 (en) * 2017-03-21 2020-09-15 O.C. Tanner Company Systems and methods for utilizing webhooks integrated in platform-as-a-service supported application development and deployment
US10791105B2 (en) 2017-04-07 2020-09-29 Microsoft Technology Licensing, Llc Credential-based proactive discovery of remote micro-services by spreadsheet applications
US10862979B2 (en) 2017-04-07 2020-12-08 Microsoft Technology Licensing, Llc Techniques for supporting remote micro-services as native functions in spreadsheet applications
US10521198B2 (en) 2017-07-24 2019-12-31 Wix.Com Ltd. Dynamic preview of database-populated web pages
US10789360B2 (en) * 2018-01-25 2020-09-29 Sap Se Protection against third party JavaScript vulnerabilities
CN108616540B (en) * 2018-05-09 2020-09-01 聚龙股份有限公司 Platform authentication method and system based on cross-platform encryption algorithm and declarative filtering authentication
US10331462B1 (en) * 2018-11-06 2019-06-25 Cloudflare, Inc. Cloud computing platform that executes third-party code in a distributed cloud computing network
KR102612851B1 (en) * 2022-11-16 2023-12-13 쿠팡 주식회사 Electronic apparatus for providing information related to scripts and method thereof

Family Cites Families (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6167534A (en) * 1995-11-24 2000-12-26 Rational Software Corporation Load test system and method
US7814157B2 (en) * 2000-01-11 2010-10-12 Eolas Technlogies, Inc. Hypermedia browser API simulation to enable use of browser plug-ins and applets as embedded widgets in script-language-based interactive programs
JP2003141066A (en) * 2001-06-20 2003-05-16 Matsushita Electric Ind Co Ltd Network system and agent server
WO2003058375A2 (en) * 2001-10-26 2003-07-17 Zeosoft Corporation Development, management of distributed clients and servers
US20040098704A1 (en) * 2002-11-14 2004-05-20 International Business Machines Corporation Systems and methods for defining Web applications pages
US7974990B2 (en) * 2003-07-16 2011-07-05 Hewlett-Packard Development Company, L.P. Managing program applications
US7676785B2 (en) * 2004-02-13 2010-03-09 Microsoft Corporation Hosted application as a designer in an integrated development environment
BRPI0401465A (en) * 2004-04-20 2006-02-21 Embria Informatica Ltda system for managing interactions between users and software applications in a web environment
US20050257196A1 (en) * 2004-05-17 2005-11-17 Gideon Hollander System and method for developing new services from legacy computer applications
JP4355639B2 (en) * 2004-09-15 2009-11-04 キヤノン株式会社 Image processing apparatus and control method thereof
US8099713B2 (en) * 2005-01-18 2012-01-17 Siemens Aktiengesellschaft Program system, and method and system arrangement for configuring it
US7779385B2 (en) * 2006-05-10 2010-08-17 Oracle America, Inc. Method and system for automated component product integration
US8082539B1 (en) * 2006-12-11 2011-12-20 Parallels Holdings, Ltd. System and method for managing web-based forms and dynamic content of website
US8091067B2 (en) * 2007-01-12 2012-01-03 Sas Institute Inc. Method and system for hosting a programming environment
US20090049423A1 (en) * 2007-07-23 2009-02-19 Ebay Inc. Javascripttm programming extension
US9218166B2 (en) * 2008-02-20 2015-12-22 Embarcadero Technologies, Inc. Development system with improved methodology for creation and reuse of software assets
US8825691B2 (en) * 2009-06-03 2014-09-02 Yahoo! Inc. Open search assist
CA2713247C (en) * 2009-08-31 2015-06-16 Accenture Global Services Gmbh Integration environment generator
US8595284B2 (en) * 2009-12-14 2013-11-26 Samsung Electronics Co., Ltd Web application script migration
US20110167332A1 (en) * 2010-01-07 2011-07-07 Neopost Technologies System and Method for Generating Web Pages
US9189649B2 (en) * 2010-06-25 2015-11-17 International Business Machines Corporation Security model for workflows aggregating third party secure services
US8997069B2 (en) * 2011-04-13 2015-03-31 Microsoft Technology Licensing, Llc API descriptions
US8689344B2 (en) * 2011-05-16 2014-04-01 Guest Tek Interactive Entertainment Ltd. System and method of integrating modules for execution on a computing device and controlling during runtime an ability of a first module to access a service provided by a second module
US8640093B1 (en) * 2011-06-24 2014-01-28 Amazon Technologies, Inc. Native web server for cross-platform mobile apps
US9092540B2 (en) * 2012-02-14 2015-07-28 International Business Machines Corporation Increased interoperability between web-based applications and hardware functions
US20130275957A1 (en) * 2012-04-12 2013-10-17 Microsoft Corporation Customizing appliances
US20140047413A1 (en) * 2012-08-09 2014-02-13 Modit, Inc. Developing, Modifying, and Using Applications

Also Published As

Publication number Publication date
BR112015018082A2 (en) 2017-07-18
AU2014223569B2 (en) 2016-07-07
EP2962195B1 (en) 2019-04-10
JP2016505994A (en) 2016-02-25
ES2733731T3 (en) 2019-12-02
PL2962195T3 (en) 2019-10-31
KR101722108B1 (en) 2017-03-31
US9465586B2 (en) 2016-10-11
AU2014223569A1 (en) 2015-07-09
DE202014010923U1 (en) 2017-01-18
BR112015018082A8 (en) 2018-01-02
WO2014134133A1 (en) 2014-09-04
CN104903860B (en) 2018-01-16
CN104903860A (en) 2015-09-09
KR20150122216A (en) 2015-10-30
US20140245253A1 (en) 2014-08-28
JP6162256B2 (en) 2017-07-12

Similar Documents

Publication Publication Date Title
AU2014223569B2 (en) Third party application scriptability
US8843820B1 (en) Content script blacklisting for use with browser extensions
EP2229637B1 (en) Secure and extensible policy-driven application platform
US8973158B2 (en) Trust level activation
JP5296106B2 (en) Secure browser-based application
US8839233B2 (en) Discovering and installing web application plugins
US8271995B1 (en) System services for native code modules
KR20140061002A (en) Method and system of installing shortcut through mobile application
CN110574033B (en) Reduce remote procedure calls for multimedia content delivery
KR20140018414A (en) Browser based application program extension method and device
Nauman et al. Realization of a user‐centric, privacy preserving permission framework for Android
KR20120051195A (en) Apparatus, method, and recording medium for installing a preloading application in mobile terminal
Shashi Setting Up the Development Environment
Panhale HMAD: Internals
Ryck et al. Traditional Building Blocks of the Web
HK1153011B (en) Secure browser-based applications

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20150702

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20160915

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: GOOGLE LLC

REG Reference to a national code

Ref country code: DE

Ref legal event code: R079

Ref document number: 602014044402

Country of ref document: DE

Free format text: PREVIOUS MAIN CLASS: G06F0009455000

Ipc: G06F0008000000

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

RIC1 Information provided on ipc code assigned before grant

Ipc: G06F 9/455 20180101ALI20180822BHEP

Ipc: G06F 8/00 20180101AFI20180822BHEP

INTG Intention to grant announced

Effective date: 20180913

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

Ref country code: AT

Ref legal event code: REF

Ref document number: 1119609

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190415

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602014044402

Country of ref document: DE

REG Reference to a national code

Ref country code: NL

Ref legal event code: FP

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: RENTSCH PARTNER AG, CH

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 1119609

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190410

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190910

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190710

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190711

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190710

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2733731

Country of ref document: ES

Kind code of ref document: T3

Effective date: 20191202

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190810

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602014044402

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

26N No opposition filed

Effective date: 20200113

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20200229

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200226

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200229

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190410

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230506

REG Reference to a national code

Ref country code: CH

Ref legal event code: U11

Free format text: ST27 STATUS EVENT CODE: U-0-0-U10-U11 (AS PROVIDED BY THE NATIONAL OFFICE)

Effective date: 20260301

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: NL

Payment date: 20260226

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20260227

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: ES

Payment date: 20260302

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20260227

Year of fee payment: 13

Ref country code: IE

Payment date: 20260227

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20260225

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: CH

Payment date: 20260301

Year of fee payment: 13

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: PL

Payment date: 20260206

Year of fee payment: 13